Skip to content
OpenAdvisories

Product · Cap-go

@capgo/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.8
    CVE-2026-100620

    Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account

    Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Consol…

    Cap-go @capgo/cli